$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/b12175cf-2702-3731-83e8-14996dac56a9.roa File: b12175cf-2702-3731-83e8-14996dac56a9.roa (raw, json) Hash identifier: NobcXgeJicB3bTAxOZ+GF3MpxRis5mnw7zbFiZ+JrJo= Subject key identifier: 0F:7A:0B:A7:1E:5D:A3:65:DD:80:51:13:96:0B:02:3E:42:09:4E:D0 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F43285848E59BD33AF689ECD8E47BCCC0 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/b12175cf-2702-3731-83e8-14996dac56a9.roa Signing time: Sun 16 Feb 2025 02:00:40 +0000 ROA not before: Sun 16 Feb 2025 02:00:40 +0000 ROA not after: Sat 17 May 2025 01:00:40 +0000 asID: 8069 IP address blocks: 20.33.219.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:e5:9b:d3:3a:f6:89:ec:d8:e4:7b:cc:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Feb 16 02:00:40 2025 GMT Not After : May 17 01:00:40 2025 GMT Subject: CN=f898fba8-11db-499f-9542-7b204c263ed6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:80:23:b4:e1:b0:34:ee:a8:6d:2b:46:82:2b: 38:d9:d7:1b:ba:cd:c7:90:39:38:85:3b:77:74:6e: fa:15:0e:1c:cb:14:25:82:91:95:35:5e:f4:a7:bf: 18:74:26:3b:65:f0:c4:ad:4c:b7:45:9f:bc:93:e2: 4a:e2:25:19:f4:2a:6c:75:4e:75:f2:43:d9:1f:c5: 21:28:28:03:21:b1:76:63:89:18:18:29:da:6d:d5: d5:c3:1a:d0:62:fd:a5:f5:4f:a1:77:6f:28:ee:dc: d8:1d:c7:3e:bd:9a:2f:1b:05:16:74:b7:56:3e:4f: ee:d6:54:5a:ee:83:c6:6d:9d:77:79:e9:a8:4e:b4: 39:11:0a:3e:6b:8e:47:63:be:c7:c4:c1:51:51:29: 3e:45:ac:cc:83:e8:f0:05:1c:71:68:a6:31:ce:5b: f2:7c:5b:64:7c:18:27:bb:91:c8:f6:44:a3:2e:42: 03:a9:28:df:3e:2d:87:41:a5:ea:31:f7:1d:c3:50: e3:52:5d:0c:f4:e8:62:f3:77:43:33:ea:19:1c:3c: d8:b6:56:9a:b2:6e:f0:14:75:1d:38:c4:42:fc:7b: 44:1c:81:e1:91:b3:bf:99:4a:c4:91:1e:d8:b4:54: 6c:d9:1e:36:0a:d1:81:60:75:bb:54:c1:fa:d1:ca: 91:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:7A:0B:A7:1E:5D:A3:65:DD:80:51:13:96:0B:02:3E:42:09:4E:D0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/b12175cf-2702-3731-83e8-14996dac56a9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.219.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8d:8b:cd:0e:b7:67:97:3e:49:ae:ee:a3:c9:3b:14:01:16:c5: 3c:ce:b7:35:d9:3c:61:d4:5e:93:ca:5a:30:27:7a:a6:fa:c8: 61:a6:51:21:8f:2f:eb:b1:fd:ee:17:74:14:03:2a:34:2e:94: ac:cf:86:ac:28:71:87:48:e8:eb:08:f1:86:9a:98:a8:66:45: d3:c3:85:16:6e:76:35:85:21:d7:e6:f4:7b:50:4a:a5:14:55: 67:38:d6:99:f6:d4:ad:ad:22:95:d2:bd:05:6b:30:5d:e9:4c: f8:86:d5:e1:e6:ba:79:65:c2:27:a8:5c:36:7c:5b:0d:d6:6b: c6:d2:09:d9:bc:ab:bf:df:5f:d4:a5:41:33:93:37:08:9c:71: 58:ac:a4:ca:79:d4:80:9a:ad:45:9f:9f:e3:75:93:e7:08:57: 91:c5:04:d5:d4:17:1d:2f:0e:d6:24:7e:06:97:8a:a8:23:57: 5b:55:70:67:6d:c5:fe:51:66:a1:bc:46:be:a2:cc:da:1b:1c: fb:a0:f9:05:4c:0e:13:99:9b:98:af:67:57:b4:ce:63:d9:88: 0b:67:c7:8c:28:70:85:33:11:d6:00:91:a2:3c:40:1a:2a:44: 83:01:a6:5b:38:f3:b2:e5:56:66:c4:14:b0:c8:de:8b:a3:b6: 34:54:da:94 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjlm9M69ons2OR7zMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDIxNjAyMDA0MFoXDTI1MDUxNzAxMDA0MFowLzEtMCsGA1UEAxMk Zjg5OGZiYTgtMTFkYi00OTlmLTk1NDItN2IyMDRjMjYzZWQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjoAjtOGwNO6obStGgis42dcbus3HkDk4hTt3 dG76FQ4cyxQlgpGVNV70p78YdCY7ZfDErUy3RZ+8k+JK4iUZ9CpsdU518kPZH8Uh KCgDIbF2Y4kYGCnabdXVwxrQYv2l9U+hd28o7tzYHcc+vZovGwUWdLdWPk/u1lRa 7oPGbZ13eemoTrQ5EQo+a45HY77HxMFRUSk+RazMg+jwBRxxaKYxzlvyfFtkfBgn u5HI9kSjLkIDqSjfPi2HQaXqMfcdw1DjUl0M9Ohi83dDM+oZHDzYtlaasm7wFHUd OMRC/HtEHIHhkbO/mUrEkR7YtFRs2R42CtGBYHW7VMH60cqRZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA96C6ceXaNl3YBRE5YLAj5CCU7QMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvYjEyMTc1Y2YtMjcwMi0z NzMxLTgzZTgtMTQ5OTZkYWM1NmE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCHbMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI2LzQ63Z5c+Sa7uo8k7FAEWxTzOtzXZPGHUXpPKWjAneqb6yGGmUSGP L+ux/e4XdBQDKjQulKzPhqwocYdI6OsI8YaamKhmRdPDhRZudjWFIdfm9HtQSqUU VWc41pn21K2tIpXSvQVrMF3pTPiG1eHmunllwieoXDZ8Ww3Wa8bSCdm8q7/fX9Sl QTOTNwiccVispMp51ICarUWfn+N1k+cIV5HFBNXUFx0vDtYkfgaXiqgjV1tVcGdt xf5RZqG8Rr6izNobHPug+QVMDhOZm5ivZ1e0zmPZiAtnx4wocIUzEdYAkaI8QBoq RIMBpls487LlVmbEFLDI3oujtjRU2pQ= -----END CERTIFICATE-----Generated at Sat Apr 5 09:50:04 2025 by rpki-client